Delete roles directly.

Now possible to delete a role directly, which will remove it from all
users. This will need many constraints on it, but as such may provide
the easiest action to secure.

Also added a bunch of other routes that provide alternative ways to do
various things.